Pemasangan Elastic Stack Air-Gap: Panduan untuk Pentadbir Sistem

 πŸš€ Pemasangan Elastic Stack Air-Gap: Panduan untuk Pentadbir Sistem πŸ›‘️


https://docs.google.com/document/d/e/2PACX-1vSO8zWYqCHe7VeBrxqFmnlYlvF7zw263dDDYo1hHGAZeRKnc2resOuF3Z3O7UFQ8yYoDGFQr7Ps3SRq/pub

Baca selanjutnya, γ„γŸγ γ‘γΎγ™.

Sekiranya anda berurusan dengan persekitaran 'air-gap' (tiada capaian internet langsung) dan memerlukan Elastic Stack, ini adalah panduan komprehensif. Tiada lagi kerumitan dengan konfigurasi proksi atau pemindahan fail secara manual untuk setiap fail-fail binari.

Isi kandungan

Capaian Internet Sekali Sahaja: Buat sambungan sementara sebuah server 'staging' ke Internet untuk memuat turun semua komponen – Elasticsearch, Kibana, pelbagai jenis Elastic Agent, Beats, Endpoint Security, Prodfiler, serta fail tandatangan digitalnya.

Bangunkan Repositori Tempatan:Sediakan Nginx. Ini akan menjadi salinan artifak untuk rangkaian dalaman. Pemasangan dan konfigurasi Nginx turut dilakukan oleh skrip ini.

Fleet rangkaian dalaman: Setelah repositori tempatan anda berfungsi, Pelayan Fleet dan Elastic Agent anda akan memuat turun semua binari, kemas kini, dan kunci PGP yang diperlukan terus dari rangkaian dalaman, tanpa memerlukan capaian Internet luaran.

Operasi Dipermudahkan: Panduan ini meliputi seluruh kitaran hayat: daripada persediaan awal, struktur direktori, konfigurasi Nginx, sehinggalah susunan peningkatan (upgrade) yang betul untuk komponen-komponen stack anda (EPR, ES/Kibana, Artifak, Pelayan Fleet, Ejen).

Untuk sesiapa yang memerlukan kawalan ketat ke atas pelaksanaan Elastic dalam rangkaian berkeselamatan tinggi atau terpisah. Kurangkan kerumitan, tingkatkan automasi (dalam batasan air-gap).

Script to download files for airgap. Make sure to change version in the script

https://gist.github.com/linuxmalaysia/2d356c1548f1cd6fa5a49eed87ba1cd9

### Script mudah untuk download asset dan manifest
### daripada elastic downloads bagi tujuan
### Internal repo kepada Elastic Fleet.
### use with own risks
### buat directory ini bawah html /usr/share/nginx/html
### Harisfazillah Bin Jamel 28/12/2024, update 26/03/2025
### Added Manifest and GNUPG - 20250522
### Ubuntu / Debian - apt install nginx
### Alma Linux / Rocky Linux - dnf install nginx
### Created with Google Gemini


dan

script to download Manifest

https://gist.github.com/linuxmalaysia/2ebf9814836736cccd87a2694886137f

### Script for Endpoint Security manifest download and version check
### This script is extracted from the main Elastic Stack Airgap Installation script.
### Created with Google Gemini
### Internal repo kepada Elastic Fleet.
### use with own risks
### buat directory ini bawah html /usr/share/nginx/html
### Added Manifest - 20250522
### Ubuntu / Debian - apt install nginx
### Alma Linux / Rocky Linux - dnf install nginx
### Created with Google Gemini

Rujukan


Download Arifact for Air gap

https://www.elastic.co/docs/solutions/security/configure-elastic-defend/configure-offline-endpoints-air-gapped-environments#air-gapped-artifact-server

Download GNUPG Public key and Binary for Elastic agent

https://www.elastic.co/docs/reference/fleet/air-gapped

 

Lokasi: Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia

Catatan popular daripada blog ini

PgBouncer: A Guide to Efficiently Managing Multiple Instances

 PgBouncer: A Guide to Efficiently Managing Multiple Instances To effectively manage multiple PgBouncer instances, follow these steps Install Prerequisites Ensure PostgreSQL, PgBouncer, and systemd are installed and configured correctly on your Ubuntu 22.04 or later server. Create Systemd Templates Create template files for both the socket (/etc/systemd/system/[email protected]) and service (/etc/systemd/system/[email protected]) to define basic settings for each instance. Configure PgBouncer Create individual configuration files (e.g., pgbouncer-50001.ini, pgbouncer-50002.ini) based on the templates, specifying unique port numbers, log files, and PID files. Enable and Start Instances Use systemd commands to enable and start the newly created PgBouncer instances. Verify Instances Check the status of the running instances, including PID files, log files, and process information. We can effectively optimize your PostgreSQL database's performance and scalability through the use of mu...
Baca lagi

Strengthening Linux Server Security: OpenSCAP, Lynis, AIDE, SELinux, Fail2ban, Firewalld, and FIPS Mode

Strengthening Linux Server Security: OpenSCAP, Lynis, AIDE, SELinux, Fail2ban, Firewalld, and FIPS Mode Securing your Linux server is crucial given the increasing number of cyber attacks against Linux systems. Linux offers many benefits as a stable and flexible server operating system, making it an ideal platform for hosting vital apps and sensitive information. To fortify your Linux server, we’ll discuss several open source tools and methods that can help you reinforce your defenses against potential threats. We recommend employing OpenSCAP, Lynis, AIDE, SELinux, Fail2ban, Firewalld, and enabling FIPS mode to optimize your system’s resistance to intrusions. OpenSCAP: Assessing and Auditing Server Security OpenSCAP is a free and open-source solution designed to evaluate the security posture of Linux servers based on SCAP (Security Content Automation Protocol) guidelines created by NIST (National Institute of Standards and Technology). By utilizing OpenSCAP, you can perform thorough vul...
Baca lagi

Modern SSL/TLS for Nginx: A Practical Guide to Balancing TLS 1.2 and 1.3 on AlmaLinux and Ubuntu

Modern SSL/TLS for Nginx: A Practical Guide to Balancing TLS 1.2 and 1.3 on AlmaLinux and Ubuntu The following blog post is a product of my professional experience as a Linux system administrator, enhanced and articulated with the aid of AI tools to ensure comprehensive coverage and clarity for our technical audience In the ever-evolving landscape of cybersecurity, deploying robust and adaptable SSL/TLS configurations is paramount. System administrators and security engineers must navigate a delicate balance: embracing cutting-edge cryptographic standards like TLS 1.3 for peak security and performance, whilst ensuring continued compatibility with existing systems and clients that may still rely on the well-established TLS 1.2. This guide provides a practical, command-driven approach to troubleshooting and optimising SSL/TLS for Nginx reverse proxies on both AlmaLinux and Ubuntu platforms, explicitly addressing the nuances of both TLS 1.2 and TLS 1.3. Imagine you’re tasked with configur...
Baca lagi